Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/eAfR45iIOQ6IyEop9wM8TlKMRLw.roa
File: eAfR45iIOQ6IyEop9wM8TlKMRLw.roa (raw, json)
Hash identifier: cwj5q1OL5+sJz04oOK5MsbX7y3MfOtQ5tvlTvWhQCa4=
Subject key identifier: 78:07:D1:E3:98:88:39:0E:88:C8:4A:29:F7:03:3C:4E:52:8C:44:BC
Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial: 019A2C017020C910418748DBCB6D86F97748
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/eAfR45iIOQ6IyEop9wM8TlKMRLw.roa
Signing time: Tue 28 Oct 2025 18:08:03 +0000
ROA not before: Tue 28 Oct 2025 18:08:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212271
IP address blocks: 109.205.193.0/24 maxlen: 24
2a01:fb01::/32 maxlen: 32
2a01:fb05:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:01:70:20:c9:10:41:87:48:db:cb:6d:86:f9:77:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Validity
Not Before: Oct 28 18:08:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7807d1e39888390e88c84a29f7033c4e528c44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:30:06:35:f1:6e:25:16:29:c6:69:f8:4f:
2d:8b:20:33:60:ee:0e:ce:d0:d9:0c:13:cf:81:d8:
c9:0b:23:78:01:75:cc:bf:22:6e:6c:16:c9:6d:25:
e7:54:d1:3c:3a:a1:06:92:c9:39:7e:84:01:65:49:
70:90:3d:4c:f8:bf:6a:25:ac:a5:a1:dc:49:4c:61:
30:c3:a9:9b:8b:3f:04:2f:9b:19:5d:7c:9b:bd:76:
d0:b6:75:a2:4a:77:d6:a1:99:88:7c:30:7a:16:e0:
e5:d5:8d:e9:e8:eb:b4:de:37:e8:01:d3:cd:91:2b:
9a:8c:0e:02:a9:1e:c3:8f:b7:cd:db:32:45:fe:98:
fd:db:74:14:67:0e:09:e9:67:87:be:04:88:f4:c3:
66:b5:64:17:0d:c1:33:e8:20:dc:5b:70:7f:dc:9e:
78:90:c2:fc:0e:d3:a5:aa:ee:c9:6f:69:1d:80:e9:
c4:a8:00:d9:80:86:09:34:02:c7:6f:a2:c7:31:4d:
cd:33:41:86:5b:a4:bd:47:1a:05:26:a1:69:a1:48:
a2:e9:57:99:a4:28:c1:d6:24:21:0b:08:22:ab:60:
05:87:45:cf:7b:3a:75:cc:fe:7a:bb:3d:d8:10:69:
5b:7d:8e:54:f4:99:e4:3d:7a:5e:28:5c:f7:a0:8e:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:D1:E3:98:88:39:0E:88:C8:4A:29:F7:03:3C:4E:52:8C:44:BC
X509v3 Authority Key Identifier:
keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/eAfR45iIOQ6IyEop9wM8TlKMRLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.193.0/24
IPv6:
2a01:fb01::/32
2a01:fb05:4000::/36
Signature Algorithm: sha256WithRSAEncryption
0e:da:c5:36:f7:43:fe:82:f2:fd:3a:ff:0a:28:b5:14:a6:c6:
fd:76:35:47:74:37:49:fa:4e:3b:33:f3:2c:85:1c:d9:7f:36:
60:5a:42:c4:ad:e1:f8:50:ba:3d:08:a8:c9:8f:e2:4c:2d:b1:
b2:d3:65:75:b1:cb:a6:2e:14:c5:c0:a6:a5:48:a5:27:d5:1f:
57:78:f0:8c:82:88:92:9e:e9:d9:1b:ae:1f:e1:0a:8c:67:16:
65:4a:5c:13:9b:de:3a:e5:fa:18:5b:a0:3d:bd:1a:43:0f:fe:
65:54:ab:78:9e:11:82:4f:7d:9b:91:f7:e8:6a:bb:1b:1c:ed:
af:a3:95:61:dc:c2:3d:32:e9:60:e9:e0:34:af:aa:3e:00:b9:
e7:00:7e:31:f1:85:24:8c:49:a5:2a:c1:8f:17:b6:a6:50:5f:
7d:5e:e6:f4:35:69:73:48:cb:a0:3f:ea:a6:38:53:c8:ae:15:
8f:d3:e5:0f:c3:b8:72:3d:3f:e8:1a:ce:d3:de:7e:8f:57:f7:
60:ec:b5:41:71:32:d1:03:1d:a8:6c:42:99:62:72:fb:30:14:
b9:da:1c:9f:98:7d:1e:db:eb:9e:e4:cf:01:06:6d:08:58:e5:
b1:db:38:92:b2:d0:62:fa:b4:87:4b:4c:b5:57:30:8d:1b:e7:
0b:85:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:00:00 2025 by rpki-client